CVE-2025-27146 – Matrix Appservice IRC Arbitrary IRC Command Execution Vulnerability

CVE ID : CVE-2025-27146

Published : Feb. 25, 2025, 8:15 p.m. | 26 minutes ago

Description : matrix-appservice-irc is a Node.js IRC bridge for Matrix. The matrix-appservice-irc bridge up to version 3.0.3 contains a vulnerability which can lead to arbitrary IRC command execution as the puppeted user. The attacker can only inject commands executed as their own IRC user. The vulnerability has been patched in matrix-appservice-irc version 3.0.4.

Severity: 2.7 | LOW

Visit the link for more details, such as CVSS details, affected products, timeline, and more…